Afni's CISO Brent Deterding on evaluating risk